The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
0answers
20 views

Why does mounting external harddrive trigger a UFW event?

Today I noticed when I plug in my 2TB external Toshiba hard drive, it triggers a ufw event in my logs: Jul 20 11:24:20 linuxbox kernel: [152873.728277] [UFW BLOCK] IN=inet1 OUT= MAC= SRC=xxxa DST=...
0
votes
1answer
13 views

UFW app based filtering

is there any filtering in ufw which works sort-of like win firewall? basically allowing me not only to create ip/port/proto based rules, but also to bind such limitations to specific executables ...
0
votes
0answers
23 views

Which ports to open in ufw for Windows in QEMU

I'm running Windows 7 in QEMU under Debian using bridge-networking. However when i have ufw enabled and start Windows i can not connect to the Internet. As soon as i disable ufw the virtual Windows-...
0
votes
0answers
19 views

Docker - expose port to 1 particular host

We currently have a network consisting of 2 servers (mongodb and backend, from here on). All of them run Ubuntu 14.04 Previously we just ran both on the same server but we want to expand. We already ...
0
votes
0answers
38 views

Unable to access http server when ufw is running, on Raspbian?

I have a Raspberry Pi running Raspbian, with Apache2 for the web server. Some recent change seems to have broken my ability to access my web server, when ufw is running. The server simply doesn't ...
4
votes
1answer
24 views

What does the “Incoming” option refer to in ufw?

I am configuring a firewall on my Linux Mint 17.2 to maximize security, mainly to put my mind at rest that no one will be able to do anything malicious. In gufw, there are options for allowing or ...
0
votes
0answers
11 views

Can I use UFW to replace the job of a router to route port connections to my applications?

I was on AT&T and had a router and always had to setup port forwarding for a few applications, like Qbittorrent etc. Not tht im on Time Warner Cable all I have is a modem and a switch and im ...
0
votes
0answers
78 views

use ufw to block all incoming/outgoing domain requests except my chosen one

I'm trying to allow port 53/udp to query ONLY to google's 8.8.8.8 and listen from it. I don't want my PC to accept offers from any other DNS. I'm testing this theory by connecting my PC DIRECTLY to ...
1
vote
1answer
183 views

UFW rules to allow specific behaviour

I'm new to UFW. One of our servers were compromised and I had to immediately: Deny all inbound. Deny all outbound. Allow all SSH. Allow outbound DNS. Allow Git clone, push, pull, etc. Allow only ...
0
votes
2answers
40 views

Setting up a firewall on Ubuntu 14.04 with ufw having a dynamic IP address

is it possible to lock down my server using ufw to grant access only from my office? The problem is, my office IP is dynamic (not only in the first 16 bytes but the whole IP). I had set the following ...
1
vote
1answer
21 views

UFW: Allow traffic only from a dynamic IP on its last 2 elements

I am trying to setup the following rule on ufw: ufw allow from 217.87.123.0/24 So to allow incoming connections from all 217.87.123.* addresses. The problem is that my IP does not always start ...
1
vote
0answers
67 views

How to properly port forwarding between different machines using UFW / iptables and DD-Wrt?

This is my network I want to see my ip_camera (192.168.3.4:80) from outside my house. It is on dd-wrt router (192.168.3.1) without internet. The router 192.168.1.1 has internet. However, i have a ...
1
vote
1answer
461 views

ufw: how to forward single port to another port on different interface

I have two interfaces eth0 (192.168.1.2) and eth1 (192.168.3.2). I receive data from 8080 at eth0. I want to forward it to eth1 port 80. I'm using UFW, because i don't understand iptables and how to ...
0
votes
2answers
75 views

Is UFW behind a firewall(ed) gateway router necessary

Is it really necessary to run UFW behind my Gateway Router which already has Firewall/Port rules? In this example, I am discussing running UFW on an Internet Accessible (Linux) Server that is behind ...
1
vote
1answer
175 views

ufw allow ssh - and then connection gets lost

I'm trying to set up a debian server in the cloud, over SSH. I log in using a key. After the initial startup I want to set UFW: apt-get install ufw ufw allow ssh ufw enable This is how I've done ...
1
vote
0answers
82 views

UFW Preventing Web Browsing

I have the following rule set configured using UFW on Debian Jessie 8.2.0: Status: active Logging: on (low) Default: deny (incoming), deny (outgoing) New profiles: skip To ...
0
votes
1answer
422 views

ufw won't allow connections to port 5432

I've installed Postgresql 9.4 on Ubuntu Trusty from the PGDG ppa. I've created a database and set it listen-addresses to '*'. I've made an entry in the pg_hba.conf file. I can connect locally with no ...
1
vote
2answers
71 views

Cannot login over ssh

I did something very stupid. I created user accounts on my linux server, then I disabled password logins. I configured ssh to not accept password logins and only accept ssh. I configured the ufw ...
0
votes
0answers
109 views

ufw rules for openssh and bind9

I want to allow only incoming and outgoing ssh and bind9 connections. Are these commands enough to set up firewall rules for debian to allow ssh incoming and bind9? ufw allow Bind9 ufw allow OpenSSH ...
0
votes
1answer
202 views

ufw rule deny default outgoing

I want to deny all outgoing traffic by default, except ssh connections. I added this rules: ufw default deny outgoing ufw allow ssh Then I restarted the firewall by: ufw disable ufw enable ...
1
vote
0answers
146 views

ufw firewall - how to only “allow” when I am going through a proxy

I am using a proxy to navigate on internet, and I am trying to setup a firewall that will only let me connect to internet via this proxy: if I forgot to turn on the proxy, that I should not be able ...
1
vote
0answers
346 views

How can I enable ufw automatically on boot?

sudo ufw enable Firewall is active and enabled on system startup sudo ufw status Status: active But after I restart the system and run sudo ufw status, I get the message: Status: inactive How ...
0
votes
1answer
85 views

sudo rule with placeholder

i want to allow the use of /usr/sbin/ufw for a special user. But only for a given command: in my /etc/sudoers file i have now (for blocking IPv4 addresses): blockuser ALL=NOPASSWD: /usr/sbin/ufw ...
3
votes
1answer
1k views

How to measure iptables load?

I have added about 3500 IP addresses to iptables using ufw on a Debian 7 and I am wondering if this has any impact on the performance of my server. How can I measure that?
2
votes
1answer
786 views

How to forward Remote-Desktop Port across interfaces using ufw?

Machine A has two network interfaces: Network eth0: 10.10.20.0/24 Network wlan0: 192.168.1.145/24 Machine A has 192.168.1.145 as Default Gateway, and also a route to pass 172.16.0.0/16 to 10.10.20....
3
votes
0answers
283 views

Why doesn't ufw enforce firewall rules for traffic coming from Virtualbox VM

I've been running Linux Mint 17 on my laptop for a while and thought I had it locked down to not allow any incoming traffic through "Firewall Configuration" (ufw GUI)—I have also validated this from ...
0
votes
1answer
671 views

iptables applied in local machine, Can't access remote ssh

I want to SSH to 192.168.1.15 server from my machine, my ip was 192.168.1.99. Source destination was UP, with IP 192.168.1.15. This is a LAN, there are 30 machines connected to the network and ...
2
votes
2answers
5k views

UFW is blocking DNS

I am configuring the security in my server. For easier the manage at the firewall, I installed the UFW. I did some settings in the UFW and I allowed some ports. Therefor when I enabled it the DNS ...
0
votes
1answer
208 views

Limit log sizes in particual ufw's logs

(Ubuntu 14.04 x86) I have enabled ufw and enabled logging (level low - the default). Even on low there is an entry about every second (it is accessible from the Internet - I guess just port scans ...
15
votes
2answers
24k views

UFW: Allow traffic only from a domain with dynamic IP address

I run a VPS which I would like to secure using UFW, allowing connections only to port 80. However, in order to be able to administer it remotely, I need to keep port 22 open and make it reachable from ...
6
votes
1answer
3k views

Creating UFW rule to allow application to use dynamic ports

I am currently trying to get a Google Chromecast device to work through my Ubuntu 13.04 based computer. Currently, the Google Chrome extension shows "no devices found" as long as my UFW firewall is ...
3
votes
1answer
530 views

ufw firewall rules for security.debian.org

What is a practical way to manage a whitelist of firewall outgoing connection rules for http://security.debian.org (on a server that blocks all outgoing connections by default)? My understanding is ...
1
vote
0answers
59 views

ufw in laptop running Ubuntu

I installed ufw and enabled it. The status is: Status: active Logging: on (low) Default: deny (incoming), deny (outgoing) New profiles: skip But, I am able to navigate the web, get emails and ...
8
votes
1answer
2k views

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour ...
3
votes
1answer
717 views

Can I limit connections per second for certain UserAgents using UFW?

GoogleBot is hitting my server hard - and even though I have set the CrawlRate in Webmaster Tools it is still hiking up the load on my server and slowing down Apache for the rest of the normal web ...
5
votes
1answer
8k views

Uncomplicated Firewall (UFW) and UPNP

Is it possible to configured UFW to allow UPNP between computers in the home network? Everything works if I turn off the firewall. I can see in syslog the firewall is blocking me. I've tried all ...